XSS Vulnerability in TYPO3 dlf Extension by TYPO3 GmbH
CVE-2020-16095

6.1MEDIUM

Key Information:

Vendor

Kitodo

Status
Kitodo.presentation
Vendor
CVE Published:
29 July 2020

What is CVE-2020-16095?

The dlf extension for TYPO3, also known as Kitodo.Presentation, is susceptible to a vulnerability that allows attackers to inject malicious scripts into the application. This risk arises in versions prior to 3.1.2, potentially compromising user session data and leading to unauthorized access or data manipulation.

References

https://typo3.org/help/security-advisories
x_refsource_MISC
https://typo3.org/security/advisory/typo3-ext-sa-2020-015
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.